IMPORTANT!!! Only first parameter defines the lifetime of the cookie. Above line is a copy from my installation and also states that site must be secure (SSL certificate installed) and http only, as you can see in the function definition: